This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json) Hash identifier: BXElEUQ7R+JxpXkC/XPH9Lp69MDbllGOWsL/g1UyGws= Subject key identifier: 13:AD:C1:FA:55:B2:FE:30:81:E6:85:39:C8:1B:09:48:67:20:D0:90 Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6 Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6 Certificate serial: 019B3C105FEFD83F542CB71AFDD4243EF726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 14:01:04 +0000 Manifest this update: Sat 20 Dec 2025 14:01:04 +0000 Manifest next update: Sun 21 Dec 2025 14:01:04 +0000 Files and hashes: 1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=) 2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=) 3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=) 4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: kcBQ5s9g4WX2NCt3G/IpOWbZ1JgJq2L3UTufgrqNqaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:5f:ef:d8:3f:54:2c:b7:1a:fd:d4:24:3e:f7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6 Validity Not Before: Dec 20 14:01:04 2025 GMT Not After : Dec 21 14:01:04 2025 GMT Subject: CN=13adc1fa55b2fe3081e68539c81b09486720d090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:4e:a5:07:36:d9:11:5d:01:a1:33:47:f2: 68:3a:f3:36:ce:8e:aa:86:71:55:96:10:52:1d:48: d5:6b:a4:7f:39:d3:d6:18:5c:39:f8:1e:8e:60:06: fa:8e:8e:12:a2:eb:1d:45:70:6c:6e:88:c8:82:9a: 9a:3f:c0:16:b8:d0:f8:0f:88:a6:ff:2e:50:54:17: 50:2a:3e:0b:fb:f6:f3:5e:be:49:3a:13:96:ab:21: 76:91:00:85:85:15:7f:08:59:98:36:76:49:a5:6e: b8:cb:85:05:64:5e:2d:46:ba:66:37:c9:c7:9b:09: 61:d9:cf:a0:8e:36:ad:db:75:de:04:cf:ae:7b:57: 75:1b:4b:b2:5b:ce:54:59:00:88:02:b1:12:61:12: 67:58:24:4a:0e:bc:b8:92:f2:ed:65:d4:4c:0a:e5: be:27:cf:69:a5:37:0a:8c:8c:3f:fa:08:d7:cc:9c: 90:02:93:b5:e9:9e:df:1b:ba:69:23:59:ac:78:a8: 95:4c:b2:14:cc:57:12:d8:f2:2e:18:e6:38:93:0b: e9:86:d5:8c:79:22:00:71:1c:ab:80:ef:10:77:ca: b9:fe:96:7f:92:2e:ef:ba:c3:10:fa:27:e0:23:3b: ef:16:15:e4:cd:30:7e:c0:2b:b1:b9:3e:f9:7e:99: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AD:C1:FA:55:B2:FE:30:81:E6:85:39:C8:1B:09:48:67:20:D0:90 X509v3 Authority Key Identifier: keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:44:8c:29:13:b5:37:7c:06:15:c8:bb:e7:19:88:d2:7d:41: 36:20:dc:16:69:79:5e:20:63:d0:69:08:87:d6:98:44:cc:57: 31:39:a7:78:6c:24:d3:b5:3e:af:04:c8:95:1f:02:18:94:36: 99:ca:a4:08:77:8a:7d:1e:c6:05:48:26:20:b3:63:ed:a2:09: c0:ea:42:67:73:ed:18:5a:7b:31:9d:ad:13:cf:20:94:50:36: 12:17:21:09:f3:47:eb:c3:32:9d:68:9e:29:d0:58:8d:ce:28: 0b:d2:f4:a6:d7:ee:41:1e:6b:97:fc:9a:32:21:fa:88:45:0e: 3a:37:68:f0:c0:37:52:94:e9:15:5c:16:da:a6:e4:34:32:51: 32:08:04:6a:73:f6:62:75:d8:48:97:ae:78:23:ac:16:45:53: 02:e4:a3:50:31:03:c1:75:b1:74:3a:72:d3:dd:b7:3d:04:c0: 68:2b:c1:d5:80:d7:50:72:50:8d:6e:2f:d4:39:7e:ba:38:76: b4:31:87:1d:ac:08:2f:64:93:14:1f:a0:fd:b6:f5:76:d0:5b: 7c:2f:a1:8e:88:f2:51:46:bb:13:d5:7b:bd:57:83:93:ad:9e: 9e:8e:dd:b4:bd:d0:04:23:f5:03:a6:69:78:1d:8d:7c:fa:39: fb:3e:54:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EF/v2D9ULLca/dQkPvcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZDhjMTk4NWM1MGM3ZWFkNGNmZDhkM2E5M2Q2M2U1NjEx ZjZmYjYwHhcNMjUxMjIwMTQwMTA0WhcNMjUxMjIxMTQwMTA0WjAzMTEwLwYDVQQD EygxM2FkYzFmYTU1YjJmZTMwODFlNjg1MzljODFiMDk0ODY3MjBkMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQJOpQc22RFdAaEzR/JoOvM2zo6q hnFVlhBSHUjVa6R/OdPWGFw5+B6OYAb6jo4SousdRXBsbojIgpqaP8AWuND4D4im /y5QVBdQKj4L+/bzXr5JOhOWqyF2kQCFhRV/CFmYNnZJpW64y4UFZF4tRrpmN8nH mwlh2c+gjjat23XeBM+ue1d1G0uyW85UWQCIArESYRJnWCRKDry4kvLtZdRMCuW+ J89ppTcKjIw/+gjXzJyQApO16Z7fG7ppI1mseKiVTLIUzFcS2PIuGOY4kwvphtWM eSIAcRyrgO8Qd8q5/pZ/ki7vusMQ+ifgIzvvFhXkzTB+wCuxuT75fpmB6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOtwfpVsv4wgeaFOcgbCUhnINCQMB8GA1UdIwQY MBaAFMTYwZhcUMfq1M/Y06k9Y+VhH2+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjct MmZkYTk3MDc5YzAxLzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjctMmZkYTk3MDc5YzAx LzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArESMKRO1 N3wGFci75xmI0n1BNiDcFml5XiBj0GkIh9aYRMxXMTmneGwk07U+rwTIlR8CGJQ2 mcqkCHeKfR7GBUgmILNj7aIJwOpCZ3PtGFp7MZ2tE88glFA2EhchCfNH68MynWie KdBYjc4oC9L0ptfuQR5rl/yaMiH6iEUOOjdo8MA3UpTpFVwW2qbkNDJRMggEanP2 YnXYSJeueCOsFkVTAuSjUDEDwXWxdDpy0923PQTAaCvB1YDXUHJQjW4v1Dl+ujh2 tDGHHawIL2STFB+g/bb1dtBbfC+hjojyUUa7E9V7vVeDk62eno7dtL3QBCP1A6Zp eB2NfPo5+z5UUw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:42 2025 by rpki-client